37b80d0eb227389bd7a1880476f24aa6915de45a6f356403014d4f51ae3c3483

Sharing

Copy URL Twitter E-mail

General

Target
void.vodka-app.com.zip
Size 1.4MB
Sample260916-sp8eqszzax
SHA256 37b80d0eb227389bd7a1880476f24aa6915de45a6f356403014d4f51ae3c3483
MD5 6c43123ae62923a120c7363d0d682701
SHA1 f1a78694a8ba4d0b4b0842e642b5fc69428c0948
SHA512 71ff6214e3051eca14a6ab8153080a31a2855e875bef4a63a7ea89a529d9552fb4a11e4e43f191a62bf063ff8106578967be44a02b313e600429a441856fd161
SSDEEP 24576:pkdRrF7nYBkhNY4tRi1uhYOgZJ67ylceVf+FUUaJ2FuPwn020ohY6MwOrRDXjPz1:pkJYqhNPquaOgZi2hVfGUUaJ2EI08d30
TLSH
T1CE6523C0970E8C2BDDAA76BE729F6C44C5A2F3E52135F147D04952869E8F9E8F732205
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

Malware Config

Targets

- Target
  favicon.svg
- Size 4KB
- SHA256 a9a4635b094f7bb66f11e02181bd0e9a1fdfd09bfbd4aae2f8bd49398d0500da
- MD5 c2d0cd875fac8b84dfb589e173b4ffec
- SHA1 b65aa07896b7b0b9da8eacc0e2fe6ed0cafc1837
- SHA512 3ff9e87a958b0ea1a8123e247c5b600d15b449c9dce2701578808abf33a17d96d25c6367f5da76ea02dae73336067ec27202c4381a00f337f7a34402c06c1955
- SSDEEP 96:FRw8bDtHrFEJI8f+VmxMG/BQZTXkU5A9BS0:TjrFEJlReUp5
- TLSH
  T14391839693A4863AA9014308D5B4585320E9306FF1EAD1CCFBEF5356EF159F10864F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral1 behavioral2
- Target
  icons/favicon.svg
- Size 4KB
- SHA256 a9a4635b094f7bb66f11e02181bd0e9a1fdfd09bfbd4aae2f8bd49398d0500da
- MD5 c2d0cd875fac8b84dfb589e173b4ffec
- SHA1 b65aa07896b7b0b9da8eacc0e2fe6ed0cafc1837
- SHA512 3ff9e87a958b0ea1a8123e247c5b600d15b449c9dce2701578808abf33a17d96d25c6367f5da76ea02dae73336067ec27202c4381a00f337f7a34402c06c1955
- SSDEEP 96:FRw8bDtHrFEJI8f+VmxMG/BQZTXkU5A9BS0:TjrFEJlReUp5
- TLSH
  T14391839693A4863AA9014308D5B4585320E9306FF1EAD1CCFBEF5356EF159F10864F7C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  inc/app-constants.php
- Size 2KB
- SHA256 19a67fceed83da58fd57f0be0fa946ff7d1e907c0f3f79217e6cdf6afe88bc92
- MD5 2d7eb48281ae09eb52c68350f2724a61
- SHA1 fe480a3d77d0815ce58ca1d47051379c31254e12
- SHA512 a04082c25bfdb2440553594893ca1523dff643b4359c22bf35c9ed25aed951ee520c776d81fc4df84d532dd9e779277803af39d6781a7671bc684e3235154eef
- TLSH
  T1024110C42DA7788905BD3C6B30AD44601606FCBF10A591E7E81E4C8F2D5C478ABF8CDA
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  inc/app-functions.php
- Size 19KB
- SHA256 02d7183f9ce1ccf218ad3191c9902cdcad24542450fd3c2d6f75bc249a46ae4e
- MD5 dbae2459ba342141c7cb091785928863
- SHA1 54cf8e1af5e5abbac707a3efba6b41d1d7a198b2
- SHA512 b7e7533d011dedf92acc4782cf5ddd4c6bcb9a0967f0de9531961d6722443928f6f18242b990bfd9ad517ddce31cd55facba8674508cb07a6250874b824ea2fb
- SSDEEP 384:hTgkJKD42HIo0K/+TVdpFE/7HtVcERJrgMw5:5g74OZCNq7HtVcERJrgr
- TLSH
  T182921953309D567B82E77285AA3ECD88D9BECD308185E11FFFB809A839E5E05173482D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  inc/simple_html_dom.php
- Size 59KB
- SHA256 4c8c1ab5a99bbe0a93a3d09c8a364f5f393e35359f15fac17d1d07b74312c560
- MD5 0930217a34ab63075807ab9b63d0138b
- SHA1 e17dcfd800e1a759437a908f3867fb7ab6bcf8cc
- SHA512 bc2723f4173cc1842bb9d1b323482905562e5ed00c421e6bde1bb47fd50ecc1a6c6c7bb9c19a9cc1daf967b33328609037b3870fc2157761e4b1ae5098d81ff1
- SSDEEP 1536:SPfuxfORd+kYj9gWQmNQfXyHMsFm1X+isAbnN+ishp5r0wrtjeIYH9RW7ff:SPfusYkY5gWQmNCyHMsFm1X+isAbnN+F
- TLSH
  T12D53A492324F5DFE2F9213C70B77E158EE7DE475011251ABFAE980A8752022E4365CFA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  index.php
- Size 2KB
- SHA256 c93653e47689b733788668713b7f7a411093292e0d477db69011cb57e385c6ab
- MD5 5dcaa7825b582fb91c1b6758240d0e94
- SHA1 fccbc18144bbff8ab36e1d0d7327447174e98072
- SHA512 62b4bbf9cec0d2c83182e23780a75c0a1b5977b0c8c5cf099a63d149ac93fb8b706ecb78fa1fa32e5cc3f2f446436c59df0646b0658a202aabae99a5d98a98b5
- TLSH
  T1215174CB50623AD74AA87CD881BE6404A63FFC1FC448E002ED6518661CC0E0C57709F3
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  static/js/1047.7adb2f38.chunk.js
- Size 98KB
- SHA256 e6a0674bfe0c470ded961091eed6992bb3277b34ea8562a2c5829af09cede8b1
- MD5 bd848b168cf6c42d8d4474aaf295cbda
- SHA1 e914c3817ba6d1994bdcd46ce7b8e432d86fa917
- SHA512 4a92054b92c55f8167fa5693aab8b3b766874fb115ff330f467009ad29912b153e3066e3afd1678c9f3445b11291ff0733dad6fbe5dbc9b4092a44a5f1a49914
- SSDEEP 1536:aHYUGBqGx8d6bzHR56qTajTHx94hixQ5gDr2J9mJQTSUCPis9o1WVC0:NBCZqT2RykQor2JIb3L
- TLSH
  T10EA3B6C0B3DC797F82CB934A9678C566E1BDC436B695C0FD31DC182954A982847B8EF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  static/js/1119.b8e908a9.chunk.js
- Size 1KB
- SHA256 b6bfb843c0b51652e51a34b7022f64751aaf8685baa3ddee1887f5a7aba7868b
- MD5 3c6d6a9a00732fa7073705c4768c2548
- SHA1 dd4bec5721114d07c1d4e5c2ef2db9e234509a1f
- SHA512 7cf32939446de5fded7f1b6197e1a26eb73fda85af35d41d75a6b0ba79e7255c19caeff7fa1c87054de4b0e5fb3f2d54497576dccd7013658b405228f55c6520
- TLSH
  T16E410985B1AC687F66E545C828BDCD0FF03DD279F93448FA70F8B834819F0959629790
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  static/js/1127.21ac70a7.chunk.js
- Size 3KB
- SHA256 6d5baeb37dc99f76fcb4a0b4e8784a1d9159be4ef75d20bbbdcd8738a80833c8
- MD5 51f786549570d171c1dca0f4a91c0db4
- SHA1 3c57fbffc53b7f9d398749f77a8cf47e41631923
- SHA512 e71c403b4c9017256435b39bd7c7252520eacef4b214aa97ffb7474338da38a66a1796f6784d2139eae70245d1a874c42da2d889ec3802dbde9c168b4aaff859
- TLSH
  T19561E1C0F2CC9C2F57E90982857D8A6EF13DE579A36484B678EEB830404D690A7627B1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  static/js/1140.71f6d137.chunk.js
- Size 10KB
- SHA256 9bd688860e52531c948432d431a5e0c3a9502bf55c637b716a9b4fdacc707a62
- MD5 821668d66c15c773156268b0f034d6fd
- SHA1 8d150abc3b28150fea7dd98d43ee820ea131cd0d
- SHA512 6fe29194eaa7607c08d6e83b53e4915eb4de820cc7bcf0ea4e02070c7f5ec4914a988b52f485f94863a3db1536bc401322924b492fbe327cc43e88328c648103
- SSDEEP 192:4/0dPXGgGeVtLogz6Lya6LpyK85WJWpUGctXcp8nucL+Se7TI8VFE02jq46:4/UkeVtMg+2a69EWJWpUGctXcanucL+x
- TLSH
  T1593289C0B38CA97FC0C99345D93EE58AF57DD43F624160FD3659E8E4A9A49189321CBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  static/js/1152.4fc733dd.chunk.js
- Size 49KB
- SHA256 00ff4d0f5fb858c14838bbc1851f60c7749cefde381f221a24b62d815090c1dd
- MD5 239a58db4514d5eccacfbf9f23e9f631
- SHA1 138ea791ae969baab8fbb85ada10cfdde17dc5ee
- SHA512 2e98ec7623892b3049c95b80f57b7100e7f3973ca3dc6af8bb5bc7627195aae24096015e22667815309daac56f66af00e9b7a53f15580e132ff1c82382140b0f
- SSDEEP 384:no/DJ3OHUPpA2TP/b1NFAY6MzBv6SjUNiqEmXMtrj1i:epAGzHyxMzBv6SjUNiqHXMtH1i
- TLSH
  T1E533BCC5F29C687F99DA16C148BDCE9FB13EE13AE320847AB0F8F434019E1649B556B1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  static/js/1153.0af0864d.chunk.js
- Size 75KB
- SHA256 1f985ca46a9e6f6e7d2845dbaf41856091923d6504aab35b65af34aedf2646a0
- MD5 cd91e25713d4a6d97851c87eaa2e65cb
- SHA1 6c92e9b563e11c19beed453e539409d47dcfee6c
- SHA512 806f05902c3d40be5951c3cd4f1c542c5c5bbfb09e818eeed11088c6bcd66dad457dab59e846a3477ad046e48c2e60b5f051eab7acb839be621fd1e4b4919417
- SSDEEP 768:Ehn6IHR/nHqXY68/d1tuu+eQeqxL/eTh2eEhSovjAPSyMr3zGF1yQJPOFbuXUjit:EhzV1ifpjuYPpcm16nKCM2
- TLSH
  T1F27394C473DCB87F82C66392943ED888B13DE4394286607E37ECE099ACB48595772D79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  static/js/1400.ac9b40ca.chunk.js
- Size 1KB
- SHA256 bfca788a03acd9fb75b0b189e29280654efd4e881abfeb80bb3f8649f53b3e8c
- MD5 7328fe78e0b473b4c9c57874ce6c6975
- SHA1 059739246e7a16deea30c51c6b5afd5ddf3329c7
- SHA512 3cacdcc143a2dadf7eac79c238469a8719aca7abaf0acf99ec92bbf3cac277c7315b53b0a1f2c0559dc84d60f76d8745c06a4bf7926765d7deac6944272a2dd0
- TLSH
  T1D93140C6F2CC2E7F29E56B8524B8CDDD642FC53CFBA404B371F85D28145A0689A519D1
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  static/js/1426.179c0724.chunk.js
- Size 60KB
- SHA256 1efe2b673cbf004a2ea8e2bfa34c1539815f7e15ee1128e7e1e1e94a61d2fd22
- MD5 dfe6c90a13bfae05da2647aaed06018f
- SHA1 e80f03b1692f0ebff596e1941ac1dd499a6349af
- SHA512 93ff7b247fbb78ccd3d86d01637480d6c9920776047dfb53bb57e2d925a5902331d17a73b6cfb0e992ecae169d7bc7fa628c87b739dc892c588f2455000482d3
- SSDEEP 768:g+5CEW/mqBHjtGIevsEVi34rpH0d7mcs2GoGsAGaSq2G/XQygE46hBTqn:gavFmtVCBTqn
- TLSH
  T1765386C2B39D38BF85C5439254BDDD4FF23FE539A6A0847AB09CA93860AC418E755DE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  static/js/1433.1b5c6873.chunk.js
- Size 17KB
- SHA256 4e96c3aece5a3edf41e3d048d681c642f846e80cfe92e55514e1c1a99e3c9990
- MD5 71c90a56a14d24f7c9eab3a3c198afd7
- SHA1 1c3ef10c55b808248324f1c3fc90d6fb55828189
- SHA512 d4c13cf2de1807f0ce489de3be62be81e68aa7d95a564eae550391f77306b5a36771d37b81706fa9e7a3fa899f2fee0ceae4284a16ba2736d84d1a78f7a6599f
- SSDEEP 384:YHV3RQl7pgJoeVuMg+2am9EWJWpUGctXcynucL9+k6KHKk9ApA07SW:YHbQVpgJoeVuMg+2am9EWJWpUGctXcya
- TLSH
  T10D8275C0B38C6C3F81DA9342583FC94AF23DD43E936150B97A6DE8D49998924E726F74
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral29 behavioral30
- Target
  static/js/144.4270ddb8.chunk.js
- Size 10KB
- SHA256 5131df31fb458df84af392941abb18592e8e71439011a4f72cc9fba98f706030
- MD5 0ce8be21bb4807b7f24562cabdb436c7
- SHA1 a0cd9083289540e0f8589fb4eaa28c0825ee8d5b
- SHA512 9c80c493abf5d300e878615d114970f2eb25b5011e9ad2a3de76a27116613a5497fb97a29e4795e48ee8c8960faa8365d9f44c91ed2b1b12a5765db596f3e758
- SSDEEP 192:ntkpm+8l++TkVlF00PIRJ1hSTiELI4Jl9sspWhoit:nKe1hSTiEUeFQX
- TLSH
  T1C7221180B3DF243F89D353519C3FC486707CE9B992EA806839EDA0D468D645C6B35EAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32